Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/XPvn0v_axuhn1KHilNg4HIXRa4E.roa
File: XPvn0v_axuhn1KHilNg4HIXRa4E.roa (raw, json)
Hash identifier: OgoLiPRa+pSZBuRCUHyMMgOjYm+Ptw8kghzTK8vp3Og=
Subject key identifier: 5C:FB:E7:D2:FF:DA:C6:E8:67:D4:A1:E2:94:D8:38:1C:85:D1:6B:81
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/XPvn0v_axuhn1KHilNg4HIXRa4E.roa
Signing time: Thu 15 Sep 2022 02:39:25 +0000
ROA not before: Thu 15 Sep 2022 02:39:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131600
IP address blocks: 223.26.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5CFBE7D2FFDAC6E867D4A1E294D8381C85D16B81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:93:d4:20:35:6e:a4:13:90:cc:3b:db:ce:
b8:74:5c:ae:b2:30:98:e6:a4:78:86:2f:9a:c4:01:
56:45:4b:07:a6:b9:e2:55:e6:a6:44:dc:57:98:3c:
80:dc:63:6e:ef:45:6e:aa:75:64:31:72:33:cd:2d:
4a:e9:3c:ec:d8:45:b0:b3:ff:0f:a1:90:6d:c1:95:
92:08:a7:cb:70:67:27:83:8e:b8:0f:0d:f7:72:d4:
47:7c:d1:c2:07:4e:c5:c3:56:a9:2f:62:0d:ac:f4:
c5:9e:a9:36:28:4c:e1:b2:b3:41:07:70:20:e7:e3:
9c:a4:04:01:a0:81:fa:c7:98:2c:e7:e2:81:47:99:
f3:cc:4a:08:00:e4:59:8f:c6:66:b2:c7:93:58:de:
d5:94:b7:a1:3b:a5:7f:43:4a:a1:c2:4d:b7:72:41:
43:d8:9f:b4:c1:b5:ae:2d:29:b6:cf:7c:85:60:85:
90:db:81:12:16:79:f1:69:f2:d4:43:55:e8:10:2f:
72:e4:7d:f4:25:10:4b:60:56:64:53:ae:5e:c7:71:
59:29:10:00:29:d0:54:4e:7e:5d:dc:6c:64:82:74:
89:b7:11:86:3b:c4:9e:99:8c:6a:3b:14:f0:c9:d3:
2d:6e:dd:6d:e3:c5:92:03:b8:c9:31:ff:f7:7e:01:
8a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FB:E7:D2:FF:DA:C6:E8:67:D4:A1:E2:94:D8:38:1C:85:D1:6B:81
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/XPvn0v_axuhn1KHilNg4HIXRa4E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.26.68.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:92:08:7a:b5:7c:35:80:d9:e6:88:a1:60:a2:f3:89:71:c3:
bc:9c:05:3b:d4:1a:82:71:c0:c6:d8:99:7c:42:92:d9:59:f0:
f5:ce:44:83:91:f0:2e:d8:c6:4b:7f:56:39:57:88:42:65:0c:
8a:2e:4e:61:66:05:ce:2f:c8:42:e0:2d:8a:5a:8a:38:43:44:
5c:01:91:16:8b:96:88:48:1d:2b:52:1f:ab:22:0c:74:de:02:
09:b6:1c:43:56:5b:73:8e:ea:52:ec:6d:e4:7d:37:95:df:a6:
b9:5d:1c:e1:f1:2a:02:83:90:f8:48:7a:95:f2:74:a5:f6:06:
e8:3d:b5:f3:0c:5b:5d:8b:4e:f2:a4:6c:26:c3:1a:2a:76:e1:
12:02:ce:74:7c:fb:5e:18:cb:3f:6b:1f:9b:e1:1a:6c:66:1a:
b6:f6:83:21:1d:d2:61:b6:0e:d7:85:0f:6d:3a:66:ab:df:3c:
11:89:a7:05:f8:e5:a5:fd:de:84:04:f4:1b:c5:31:b4:e9:10:
3d:5a:75:6a:1e:c1:a1:08:f1:c2:a5:fa:f6:60:6e:4b:76:dc:
b0:32:d2:d8:5a:3f:1a:56:f4:f7:43:29:e2:1c:d0:07:72:52:
cf:07:c2:25:8b:30:74:ce:08:77:7b:3c:7d:49:d2:1d:dd:e8:
83:90:ba:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:04 2024 by rpki-client on console-ams.rpki-client.org